EIP-2026-114149

This exploit demonstrates an arbitrary file upload vulnerability in the Uploader plugin for WordPress, allowing an attacker to upload a malicious PHP file and achieve remote code execution. The PoC uses cURL to send a crafted POST request to the vulnerable endpoint, bypassing file validation.